Custom root certificate

If you need to run the agent with a custom root certificate, you can use the following Helm values. Format is PEM certificate and with UTF-8 encoding.

Paths are /app-root/azp-custom-certs for Linux-based agents and C:\app-root\azp-custom-certs for Windows-based agents.

# config-root-ca.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: custom-certs
data:
  root-1.crt: |
    -----BEGIN CERTIFICATE-----
    ...
    -----END CERTIFICATE-----    
  root-2.crt: |
    -----BEGIN CERTIFICATE-----
    ...
    -----END CERTIFICATE-----

# values.yaml
extraVolumes:
  - name: custom-certs
    configMap:
      name: custom-certs
extraVolumeMounts:
  - name: custom-certs
    mountPath: /app-root/azp-custom-certs
    readOnly: true

Last updated on November 27, 2023

Capabilities Deploy on Azure with Bicep